Exchange Online adds Inbound DANE with DNSSEC for security boost

July 17, 2024 at 03:09PM Microsoft is introducing inbound SMTP DANE with DNSSEC for Exchange Online in public preview to enhance email security. This includes utilizing TLS Authentication (TLSA) DNS record for verifying mail server identity and using DNSSEC for cryptographically verifying DNS records. The rollout, scheduled until 2025, aims to protect email domains from … Read more

Google to Block Entrust Certificates in Chrome Starting November 2024

June 29, 2024 at 11:45AM Google has announced it will block websites using certificates from Entrust in Chrome browser from November 1, 2024 due to compliance and security issues. TLS certificates from Entrust will not be trusted by Chrome versions 127 and higher. Users will see a warning for insecure connections, urging website operators to … Read more

Google cuts ties with Entrust in Chrome over trust issues

June 28, 2024 at 10:36AM Google is ending its trust in Entrust due to a history of compliance and general improvement failures. From November 1 in Chrome 127, TLS server authentication certificates using Entrust or AffirmTrust roots won’t be trusted by default. This may require website owners to choose a new CA owner to avoid … Read more

Microsoft announces deprecation of 1024-bit RSA keys in Windows

March 18, 2024 at 03:56PM Microsoft will soon deprecate RSA keys shorter than 2048 bits in Windows TLS to enhance security. With 2048-bit keys offering greater strength, Microsoft’s decision aims to protect organizations from weak encryption. The move may affect older software and devices, but a grace period is likely before formal deprecation begins. Organizations … Read more